From cf732c4d274a09597b813582fc2878777da3c36d Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Sat, 4 Jul 2015 07:27:56 +0200 Subject: [PATCH] Do not leak mounttype of a public share --- apps/files_sharing/ajax/list.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/apps/files_sharing/ajax/list.php b/apps/files_sharing/ajax/list.php index d09b61fd4a..9185e508e6 100644 --- a/apps/files_sharing/ajax/list.php +++ b/apps/files_sharing/ajax/list.php @@ -71,6 +71,9 @@ foreach ($files as $file) { unset($entry['directory']); // do not disclose share owner unset($entry['shareOwner']); + // do not disclose if something is a remote shares + unset($entry['mountType']); + unset($entry['icon']); $entry['permissions'] = \OCP\Constants::PERMISSION_READ; $formattedFiles[] = $entry; }